Error message 0x80092013

If like me you have concluded that this is not a connectivity issue.

In my case it is a problem with Webkit2 and they way it handles SSL certificates.

To test if this is the case install Safari for windows 5.1.7(if not already installed) and try to access a secure site, like facebook or your banking, if you receive a certificate dialog box saying

"Safari can't verify the identity of the website"

If you hit "Continue" and the page loads but does not render correctly ........

Then try using another browser (IE/FF/Chrome) and see if you are able to access the site without prompts and the page renders correctly.

From Safari 4.04 onwards (as well as iTunes) it uses the windows root certificate store, to test uninstall Safari 5.1.7 and go back as far as Safar 3.2.3 (oldapps.com) and then try to access a secure site, if it renders correctly (back then Safari handled it's own certificates) you have the same problem as me

If you also look in the logs for itunes when you're accessing (attempting) the store if you find a reference to webkit2 and certificates that should further help clarify the problem. btw - don't bother with windows root certificate updates if your other browsers work ok

This is very old issue, not sure if someone is still looking for a solution. My two cents.

I am in corporate network and behind proxy (require authentication). itunes store and iClould for Window all failed with 'CertVerifyCertificateChainPolicy failed with error 0x80092013' as seen in log file

Using Microsoft Message Analyzer, I found 407 (Proxy Authorization Required) error when itunes try to get the CRL from website. It is obviously a bug as itunes did ask for proxy password at the beginning.

To overcome this problem, download the CRLs and install them manually. Below is the list of CRL involved for itunes at 25 Nov 2014 (don't know if more will come).

http://sr.symcb.com/sr.crl

http://crl.entrust.net/server1.crl

http://crl.entrust.net/2048ca.crl

http://crl.entrust.net/level1c.crl

http://crl.verisign.com/pca3.crl

http://sb.symcb.com/sb.crl

Just put the URL in any browser. The .crl will be downloaded. On Window, right click on the .crl, click 'Install CRL' and follow the instruction on screen by accepting all defaults. After installing all these, itunes store can be accessed.

However, as the CRL has an expiration date, quite likely the CRL need to be updated (manually?) regularly.

Latest version of iTunes (12.1) - advertised as being full 64-bit compatible for Windows - finally solved my issues (~4 years later). Hope others are having the same success.